CVE-2024-45104

No fix known EPSS <1%CVSS 6.3

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.

Published 2024-09-13 · CVE record · OSV

Products: lenovo xclarity_administrator